MEMORANDUM OF UNDERSTANDING and 
DATA SHARING AGREEMENT 
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This Memorandum of Understanding and Data Sharing Agreement ("MOU") is entered into on August 8, 
2017 by and between Eckerd Youth Afternatives, Inc. d/b/a Eckerd Kids ("Eckerd Kids'*), a Florida 
nonprofit corporation, Mindshare Consulting Group, ILC ('MIndshare") a Florida not-for-profit 
organization, and the New Hampshire Department of Health and Human Services, Division for Children, 
Youth and Families ("DCYF") with respect to the implementation and use of Fckerd Rapid Safety 
Feedback*. Eckerd Kids and Mindshare are sometimes referred to herein collectively as the ''Providers^'. 
Eckerd Kids, Mindshare and DCYF are sometimes referred to herein collectively as the "Parties." 

1, Intent This MOU identifies the Parties' understandings of their rights and obligations to 
each other with respect to 1) the access to and sharing of DCYF Agency data and 2) the 
implementation and use of Eckerd Rapid Safety Feedback*. 

2, Purpose of Agreement. Providers represent that the data specified in this MOU will be used 
solely for purposes of Eckerd Kids Rapid Safety Feedback 

3, Definitions: 

1. Agency means the New Hampshire Department of Health and Human Services, 
Division for Children, Youth and Families ("DCYF"). 

2. Confidential Information means information each party may come into contact 
with concerning the other party. Including without limitation client records and 
other proprietary Information which must remain confidential pursuant to liie 
terms of this MOU. 

3. Eckerd Rapid Safety Feedback* means a program developed by Eckerd Kids that 
utilizes predictive analytics to help identify child welfare cases of the highest 
probability of a serious injury or death and identifying critical case practices, 
that when performed by the Agency to applicable standards, will greatly assist 
in keeping the child safe. 

4. Eckerd Rapid Safety Feedback* Community of Practice means the Agency 
participating in quarterly fidelity reviews and sharing Information and reports 
with Eckerd Kids. 

5. Fideiity Reviews means a review by Providers to ensure the Agency is 
implementing Eckerd Rapid Safety Feedback* according to established 
practices. 

6. CCWtS/SAOAfiS means the Jurisdiction's statewide automated child welfare 
information system referred to as Bridges. 

7. Portal means a website and related technology that is designed to read 
CCWIS/SACWIS information, perform automated analysis, and generate reports 
that can be used to implement and support Eckerd Rapid Safety Feedback*. 
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8* Portal Terms means the website usage terms available on the Portal that sets 
forth the terms and conditions under which the Agency may use the Portal. An 
example of the current portal terms and conditions are Included here as Exhibit 
A. Exhibit A is NOT incorporated herein, but provided for information, only. The 
ruling website usage terms are those that are required to be accepted by the 
User at the time of Portal use. 

9. QA means Agency Quality Assurance staff member that does not carry a 
caseload. 

4* Introduction 

1. Eckerd Kids is a not for profit corporation that specializes in human services, 
specifically child welfare. During the course of its business, Eckerd Kids has 
developed Eckerd Rapid Safely Peedback", a program that has been successful 
in reducing the occurrence of serious Injury or death in high risk dependency 
cases. 

2. Eckerd Kids, and its affiliate, Mindshare operate using the Portal and related 
training materials to assist agencies that desire to implement Eckerd Kids Rapid 
Safety Feedback^. 

3. Agency has chosen Eckerd Kids and its affiliate Mindshare to implement Eckerd 
Rapid Safety Feedback* In the State of New Hampshire and this MOU describes 
the responsibilities of the Providers and the Agency in connection with that 
implementation. 

S. Eckerd Kid's Responsibilities 

1. Eckerd Kids, with its affiliate, Mindshare, host, maintain and support the Web 
Portal with a goal of providing the Agency with 24 hour technical support and 
access to the Portal and the reports it generates. At no time will any Web Portal 
content or data be backed up, stored or hosted in any location outside of the 
United States. All data, associated in anyway with the Web Portal will be owned 
solely by the Agency. Mindshare will not authorize or provide access credentials 
to any person other than Agency or Eckerd Kids employees who have a need for 
such access or credentials, without Agenc/s prior written consent. Mindshare 
will not provide administrative level access to the Web Portal or any database or 
data storage system used by the Web Portal to any person without Agency's 
prior written consent. Each employee of Mindshare who has access to the Web 
Portal or any database or data storage system used by the Web Portal will 
execute a confidentiality agreement reasonably acceptable to the Agency 
confirming the employee's duty to maintain all data and Information relating to 
cases referenced In the Web Portal strictly confidential. Eckerd Kids and 
Mindshare will adhere to the "DHHS Information Security Requirements" which 
are attached to this agreement as Exhibit B and incorporated herein by 
reference. 

2. Eckerd Kids, with Its affiliate, Mindshare, will: 

a. Adapt the Portal to create reports that provide a customized predictive 
data sample of prioritized cases for review; 
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b. Provide training on review completion, portal entry, staffing techniques, 
and action Item tracking to support the Agency's implementation of 
Eckerd Rapid Safety Feedback*^; 

c. Provide Agency personnel with access to the Eckerd Rapid Safety 
Feedback* practice guide for use in connection with the Agency's 
implementation and offer same day technical assistance from case 
review staff experienced in the review process; 

d. Perform quarterly fidelity reviews and coordinate sharing of best 
practices across jurisdictions through the Eckerd Rapid Safety 
Feedback* Community of Practice; and, 

e* Provide additional reports as mutually agreed upon by Eckerd Kids and 
the Agency. 

6. Agency's Responsibilities 

1. The Agency will allow the Providers to access an extract of the Agency's 
CCWIS/SACWIS system on a daily basis. The agency will provide access to the 
client fries of clients that died due to maltreatment and/or clients that 
experienced serious maltreatment while known to DCYF. 

2. The Agency will: 

a. Work with Mindshare to establish an agreed exchange protocol and 
accommodate the DCYF data exchange method and data packaging 
formats. The exchange protocol will include the specifications for the 
Initial historical data package. A minimum of three years client data 
history should be provided within thirty days of signing the MOU; 

b. Provide sufficient reviewers to the Eckerd Rapid Safety Feedback* 
program. Reviewers should be dedicated QA staff that are NOT 
investigating or managing the case or providing supervision to the front 
line workers assigned to the case. Reviewers must successfully complete 
Eckerd Rapid Safety Feedback* training (provided at no cost to the 
Agency) prior to completing case reviews; 

c. Participate in a quarterly Fidelity Review, sharing lessons learned with 
other Jurisdlrtions, and report the results observed after 
implementation of Eckerd Rapid Safety Feedback*; 

d. Enter all case reviews into the Eckerd Rapid Safety Feedback* portal to 
provide automated tracking functionality, dashboards, and data for the 
continuous Improvement of existing predictive data sets for the Eckerd 
Rapid Safety Feedback* Implementation in New Hampshire; and, 

e. Provide Providers written notice of any lawsuit or claim filed or asserted 
against the Agency alleging liability In connection with Eckerd Rapid 
Safety Feedback* 

7, Term of MOU 

1. This MOU will be effective upon execution by the parties and will terminate on 
December 31, 2018 (the 'Term") unless terminated earlier pursuant to Section 
7.2 below. 
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2. Any party may terminate this MOU for any reason with ten (10) calendar day 
written notice to the other parties. 

3. There are no renewals to this MOU. The Parties may, however, negotiate a 
contract to continue Eckerd Rapid Safety Feedback® as mutually agreed upon. 

4. If mutually agreed to by the Parties, his MOU may be extended for up to six (6) 
months to accommodate the negotiation of a contract to continue ERSF*. 

8. Compensation 

Compensation for Eckerd and Mindshare's services under this agreement will be 
provided by Casey Family Programs pursuant to an agreement between Casey 
Family Programs and the Department of Health and Human Services, Division 
for Children Youth and Families dated May 30, 2017, the terms of which are 
incorporated herein by reference. 

9. Intellectual Property 

1. All CCWIS/SACWIS data will be deemed and treated as Confidential Information 
of the Agency. All intellectual property rights In and to the CCWIS/SACWIS data 
will remain the sole property of the Agency. By making CCWIS/SACWIS data 
available to Providers, the Agency will grant, and hereby does grant, to 
Providers a limited, non-exclusive, royalty-free^ fully-pald-up license for the 
term of this MOU to use the CCWIS/SACWIS data, but solely for the purpose of 
implementing Eckerd Rapid Safety Feedback® for the Agency, providing the 
Portal and related reports, and Improving Eckerd Rapid Safety Feedback*. 

2. All intellectual property rights in and to Eckerd Kids Rapid Safety Feedback •, 
the Portal and its related software and documentation, the reports generated 
by the Portal, the Eckerd Kids Rapid Safely Feedback » training materials, the 
Eckerd Kids Rapid Safety Feedback * safety guide (including without limitation 
for all of the foregoing, all related inventions, processes, improvements, trade 
secrets, algorithms, works of authorship, trademarks and service marks (jointly 
"Pre-existing IP") is and will remain the sole property of the original owner 
(Eckerd Kids, its affiliate, Mindshare, and their licensors). All pre-existing IP will 
be deemed and treated as Confidential Information. Eckerd Kids and Mindshare 
will grant, and hereby does grant to the Agency, a limited, non-exclusive, 
royalty-free, fully-pald-op license for the term of this MOU to use their pre¬ 
existing IP, but solely for the purpose of implementing Eckerd Kids Rapid Safety 
Feedback • for the Agency and subject to this MOU and the Portal Terms. 

3. By using the Portal, Agency is agreeing to abide by, and to be bound by, the 
Portal Terms and any applicable laws (Including, without limitation laws relating 
to privacy and personal identifying information relating to children). 

10. Background checks and verification 

At the sole discretion of the Agency, Providers may be subject to user 
background checks, depending on the information systems Providers accesses 


MOU - Eckerd Kids, Mindshare and NH DCVF 
Eckerd Rapid Safely Feedback* 


Page 4 







or types of data Agency provides. Providers must submit the required 
background check information to the agency in a timely manner, if requested. 

11. 

HIPAA 

Providers agree to use and disclose Protected Health information in compliance 
with the Standards for Privacy of Individuaity Identifiable Health Information 
(Privacy Rule) (45 CF.R. Parts 160 and 164) under the Health insurance Portability 
and Accountability Act (HIPAA) of 1996 and In accordance with the Business 

Associates Agreement which has been executed by the parties, is attached to this 
agreement as Exhibit C and incorporated herein by reference. The definitions set 
forth in the Privacy Rule (45 CF.R 160.103 and 164.501) are Incorporated by 
reference Into this agreement. 

12. 

Governing Law, Venue, and Jurisdiction 


This MOU will be governed by and construed in accordance with the laws of the 

Stale of New Hampshire, excluding any conflicts of laws, rule, or principle that 
might refer the governance or construction of this MOD to the law of another 
jurisdiction. The Parties agree that all disputes, claims, actions, or lawsuits 
between them, arising out of or relating to this MOU, or for alleged breach of this 

MOU, will be heard and determined by a Superior Court of the State of New 

Hampshire, or by any appellate courts which review decisions of those courts. 

13. 

Entire Agreement 


This MOU constitutes the entire agreement of the Parties with respect to the 
subject matter hereof, and supersedes any and all other agreements, 
understandings, negotiations, or representations between the Parties with 
respect thereto. 

14. 

Confidentiality 


Each Party agrees to maintain in confidence any information disclosed to It by, or 
discovered by It regarding, any other Party or Parties it knows or has reason to 
know Is proprietary and/or confidential, including, without limitation, the terms of 
this MOU ("Confidential Information"). If the receiving Party becomes legally 
required to disclose Confidential Information, or any part thereof, the receiving 

Party shall give the disclosing Party prompt notice of such requirement. If the 
disclosing Party waives compliance with any of the terms of this Agreement or Is 
unable to obtain a protective order or other appropriate remedy with respect to 
such disclosure of Confidential Information, then the receiving Party will disclose 
only that portion of the Confidential Information necessary to ensure compliance 
with such legal requirement. This Section shall survive termination of this MOU. 


[SIGNATURE PAGE FOLLOWS) 
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e Seoneoalioa If any term or condition of this Exhibrt I or the application thereof to any 
person(s) or circumstance is held tnvalrd, such invalidity shall not affect other terms or 
conditions which can be given effect without the invalid term or condition; to this end the 
terms end conditions of this Exhibit \ are declared severable 

f Survival . Provtslone In this Exhibit regarding the use and disclosure of PHI. return or 
destniction of PHI and extensions of the protections of this Exhibit in section (3){9, shaH 
survive the terminatjon of the Agreemsnt. 


IN WITNESS WHEREOF* the parties hereto have duly executed this Exhibit 

Department oIpHealth and Human Services Eckerd Youth Alternatives. Inc. d/b/a/ Eckerd 
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IN WITNESS WHEREOF, the Parties agree to the expressed terms. 

Fckerd Youth Alternatives, Inc. New Hampshire Division for Children, Youth and 
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Exhibit A: (Sample for info only) 
Client Portal Terms and Conditions 


The following constitutes the terms and conditions under which Mindshare Consulting Group, LLC d/b/a 
Mindshare Technology^ (^Mindshare') offers the information, services and facilities of Mindshare. Please 
read the terms and conditions carefully, if you do not agree to any of the terms and conditions you must 
not use the site. 

Client Portal EliRibilitv & Use 

The Mindshare Portal is only available to Mindshare clients or clients authorized to use the portal by a 
Mindshare authorized provider. To become a user of and have access to the Portal, Mindshare requires 
that you register and provide Mindshare with accurate user information. 

Acceptable and lawful Use of Site bv Authorized Users 

All users represent and attest that the Information they provided when registering as a user, and %l\ 
information that they subsequently provide regarding themselves is true and accurate and not 
misleading. 

Use of Site 

You may not use any robot, spider or other automated means to access the Site or content or services 
provided on the Site for any purposes. You may not use any means to index the Site in a search engine. 
You may not post content on the Site that contains any viruses or other computer programming 
routines that are intended to damage or detrimentally Interfere with any system, data or personal 
information. You shall not attempt to make the Site unavailable through denlal-of-servicc attacks or 
similar means. 

User Notifications 

If you register as a user, you agree that Mindshare may send information, warning and alert notices, and 
other messages per your preferences, to you via e-mail at the e-mail address you provide when 
registering to become a user (or which you later update). 

User Password and Login Identity 

You are responsible for maintaining the confidentiality of your user password, and user name/login, and 
are fully responsible for all activities that occur under your profile/account with or without your 
knowledge. If you knowingly provide your user name and password information to another person, your 
user privileges may be suspended temporarily or terminated. You agree to immediately notify 
Mindshare of any unauthorized use of your user password, user name or any other breach of security. 
Ownership and Intellectual Property 

Other than content provided by the Jurisdiction which includes the content presented in the 
dashboards, and other than supplemental review questions that may be configured and updated from 
time to lime, Mindshare owns all rights to the intellectual property and material contained in this Site, 
and all such rights are reserved. PaymenU submitted to Mindshare Is for Hosting and Use of the 
Mindshare Commercial Off the Shelf Software and Services; which includes configurations tailored for 
specific uses that are within the defined parameters of the service and that all aspects of the Host 
Service, including but not limited to the source code, dashboards, analytics and data science are 
proprietary and remain the sole property of Mindshare. 

Mindshare Consulting Group, TACF, ADXl, ICARE, CPRS and Visibility Grid are trademarks of Mindshare 
Consulting Group, All other product and brand names may be trademarks or registered trademarks of 
their respective owners. 

If you disagree wtth any of the above statements, please contact the system administrator before 
accessing this site. 


MOU * Eckerd Kids, Mindshare and NH DCYF 

Eckerd Rapid Safety Feedback* ^ 






jjcftx&it & 


Mow Hsmp^hlre Dap^rlment of Health end Human Sarvtcei) 



DHH3 fflFORMATIQM SfiCliaT^EaiitREfVtENia 

Ccntid^'liel rtcr^Wi Fqi ibe ^uwnB cTibifr Aomnert. the Dep»lni6nia Cor<Kfttfiraci mrcruoiw 
rxkiJw nny and aU mfoimator owned (f nana^ed 0 )f Ihe State oi NH o'aaletf mcofwtf tnm cr or boftatt 
ol irw OttalmofTl of Heghh and Humon SwM fOHHS} or acoouod intnaateisa or podorrifQ o^yi^acfied 
M^us-or«hlC^col39ctcn d^ciop^a pitracw uradtSdCa^ion dtio^atrecby itatror recerairawo* 
rejgiK^ Th4 iniDnrt«Qn tndudpa M la not ntttc to Pamonal Healh r/crntalwt tPH I. Pnwall/ 
IdentftaWetnformabon jPrh Fcdera Tan Infonrctan (FlJ* Socal Seciirly Numbcra ISSN) Pa^tncri Card 
IndJsliv IPCI) jTd orolhQrsofiairvoaPdconlidoniflitnronrooon 

? Tiia n-^nioh ssoper idC 4 rtr oonbe<f to prolecl Oepartmenl conftctenPto rtonnaiion calndod 

p*m 5 sed maiTaac<l» aro/or snorod r U*e odweiv ol oorlraclcd «]'vicii& iimnium oxpcctaftona roKfdo 

2 1 Mattcan pciccs and procorA-ros loprobocl Oopartinart coftldanrol rttemalDnOvougODUf iho 
rftrmaton iracyciD. «tTflfooppneat>te irmom crwon. trgnateimatten m ^lorspaardmure 
Udsiructiont lesv'iUm ol the niiKJta Lwd b stove r>r data iic Uw- (apcr etc) 

72 MaifitenBpprwiattOdtnerrtcflJionMocoeascortPotiiocMtracioriyycfralharcatoa tfant'r^i.er 

drra Departmofil oantidcntJahnloimanon whoro Qppfeabte 

fliafii*ftrt*-jn.avC>8f»ftntefti«<>irdetosidatailiywtcnpoTl8bte?»tedo cd tep*0!» jea 

09 well 09 wnoi b-onivTillQd ovc^ ptiplc notMFtcs IM Vie Ifilemet uong cunent induary 
ttaodanis and lw« o^actCBt for wrong o-Tcrvoiwn 

2 4 Erti 4 .ro 0 ‘opar ooExacy rroriteing cap^>l*M nro n pbea lo deiock DOiantet ueii^riy ove^ iKai can 
•nfvet Si&io oT WH cyi terri ard^x Oopoimenl oo^enltf nionraJjpn hr corrtntctiirpfovidQd s^ttons 

2 i pfovde aecwriy 0 «arenes« and odjcatxin ter nt emptofoos <xrtf 3 ciort ano iub-cori/aanfi n 
o' orotectirtg Doponmem coohdcrifiat rjtonnaicr 

2.6. Morlain a docuirerled toraadi noWcolion and incdwil fei|»nKi onscesa Tbo vatidor wJi corJoa the 
DopttnmoRtwjnn xy/grty^tau 7^ houraumg Ctepanm^ni'i conJ*sci sr^d sdddvTtaiemal 

Atdreim pvxTwded nSna 5 ec 1 K>^ oracontderbaiinlcimaaDn breach oompinc'seartip iniidom ot 
luwolod bioaah tetitcb aOdob w includ*i any State oT Now KanippNve lyilaina iHai omact ic the 
Stale at New Honpjhire netwen, 

2 6 1 ^B*cacn »hal have tne lamc treaning as Ihe icnr 6 /aacn* n socion IM 402 ol Ttlo 4£ Ceiio d 
fodotal RogblBirisrti 'Contbioar Secvr'Iy tiKidani* aharl tneaatre moomna 'CemoJ^er 

Secoiriy tnsident in Melon two [ 2 >orK»Sl PWHKalonaro-EI Cono^ Incdcnt 

Handing Girde. KaDonal yuintoeol Siendmda and recbnology U & Odpairvierity ConmerTe 
Sreoch notdcollo^ wti bo oomto tnefdto^rg ani«.AddraiJAa 
261 * ^>^rtSCrlgMCTtnlllrrOtilce rt?w^s nn pgv 

2.0 1 2 E3MHSlTrtotmalta >iS^utrtyOtt fecftt» bti Qltjjjv 

7 T HtnevarHtef wt* d-tyCcrrKl#nl4( inloirabm on ta systems torni-AUb contractorayilomai the 

vendd* wit martan ti docomorrlod orDossa 'tor iooiroty diposmg of ta:h naia upon cr contract 

urmnaiton. eito wtlobo‘« wiiitao cedHcotor #of aiy State ol NewHiroshirc date des:rayb!lb| the 
ver)d 7 V any fubconlraclon o& a part ol ortgong, omar^cr^y and oi dtf aatar recovery opnial>o-Q 
WbonnolQogorin tifio. etocirona enpae evyOinirto SUtotlPte# Hanipanredata shallberandonid 
umecowdtre v^BMCUTb wpc ptoaram n aocEvdanco wdh rduttiY-accoplnd sinncafdp^ mure 
delebcfi or olhBrwtie phyiJealy CWKOyrvi tt^ n*«dte Ibr wamote. doganang) The voniar wl 


ni(ri-t2 


C»'sacf£i itiiti_ 

tXtM 


MOU - Eckerd Kids* Mlndshare and NH DCYF 
Eckerd Rapid Safety Feedback^ 


Pages 




Now Hampvltiro Dopanrwnt of H»Uh anO Human Sarvtcae 



itocureni aiid dcj 1IJ>' in sr Hr* of t^o cn\n OWiuclort. snrf wM ^ni|6n wtiiric^n to :!«• 

Oopnrtn^Bnl upon rw^JoiL The i*nttonc«f:#)oadiin *nl nclucto tfldelals noc«« 7 todcniantff» daw 
rui boon oropOf?y oooiroyad and afiddeobiQ. nd$Uotoi> end prc/mrataf eiondirdfr hr 

te<flni^Tifrq*iromrntownoe.arTily ev^ualwl tiy Stale-and vcndai prto doslrucbon 

2B iriho vwforvjii 0© sUXoof^acOiiu t#iijrcuirfv7'Cl?rd of IticenDaBC^enl sucp^v^t^w sc-vcos rcr 
StflteoTNeivHirftDjHw dv w ndot wl'n-Bimer a program ol an iTntnialp*D&W5orpfO£«p« ihot 
d^ncsopeorc sfiDL^r^ wpctttfxns ff-dnomlonnp oo’^ntanc^ lo soa/C/ tJ\#i8l 0 

(Tinmjn* ma<cti incbo torlha ^ndpr. rcljdng 0r©©CP noil^C8lcn '6quitOrrenl0 

3 Tr« ttd «0(K •^^1h The Oepdt^Tient to 0ijp and comply owin at appicabto Stale c/New Hairpohto and 
Doppfintofli acC800 audtoraalion policm aro pfoceoum. ayslems axeu lorms, and conipu)©' 
ulO «grftowt» oa poi oF etternrg arto mantannn accesf toany Departmat ayslemf^) Aeroomontt ^11 
be torpielBd md iignea by ttw ^wccc and arr^ applcaae sim-conlraciDis prrar lo sy^lom ecO0ie 00«fl 
nuTtionzca 

4 inn© O^panmafii peieir^^nwlfw w^iaa Ejaneia Aia&atna pursuanlla 45 CFR16D 1B3. 

wf*! l•T^ tf-e Depwlmenl ic 5pr aid eiceeute a mFaa BoiiniiM towiaJe Agroo^wr w 

Qooanmiinl and toapcnetno rermaninnng oo^tpnee w|h iha bdpw^< 

5 Tha wirtaywllwotK^ijntnoDttpptUttrlBlilM'eqjertlocotiipleteasuniBy lltepufjxadoni'ocufvov ttro 

onaoe me Depaitirerta^dvendOf tomorrlorfof aiychangciin nihc^ihnsala. ana vunoraWUieanaip^dy 
occurew Ihe 'Heal Ibe «r>ckir engagetnoni Tltoautvoy wllbo comptol©^ ©nnuely cr an ahernalalme 
inmu at iho Oaaanmonie dswiton wih frr (ha veidor. ot U-eOep^tnienl may fcquest Iho 

avniey t» campWw wfwn Ihe scope oF Ihe enQDaemcin oct*cen Inc Depare^^card ih© > *enao f clt8nue^ 
The wsJtJTwIirotslDfe hrcAwnpb of u’-itno^ngV any Slate ofNowHnmpiAfeor OepBrtmrntdaia 
o^hoiewoLteiOe-L'totojncUnoi ofrttoUnned pnot expieas copsenf a otlanedfimm 

o^iippfopfflie m^rt'cr^Btl dele o^v^ty to®c>?fVip memoenwmn'Tto Dcpamcne 


MOU - Eckerd Kids* MIndshare and NH DCYF 
Eckerd Rapid Safety Feedbact^ 


Page? 









SXHJBirC 


HettItN Inauranco Portabinty Act 

Quatncsa Aiaadatc Agreemefil 


£ckefd Youih Aftetnatfrtfl, Inc. tsfbiai E<s««J Kida Kjdc*) and Mindcharfl 

ConstAinp (Voup. IIC C^^^ridihafT:*) agmc to cnjnply ¥rin the Heath Inauranoe Portabllly anti 
Aocauntayity Ad. PuMc Law 1W-^91 ana wth the Standards ^b^ Phvacy and Sccunty of 
imtvidu^ly WentAato Mealih Infcsriraisan, aS CFR Pant 160 and 164 and ihaae paira ol tha 
HITECH Act applteabte to txJBineaB BWOClatBS. M dafinfld nangw. 'OvsniosB Assootflo* shat 
mwn gckord KJda and Mindshare and any ot Ihelf subCOnIfactOfB or agents l^t 
tcce%<. uae cr have aooess to probeclod tiaaUfi irVermabon uncor this Agrocmenl and ‘Coverod 
Enw/ Shall moan the DepahmeRl 0/ Heaih and Hunrian Serveas. 


(tj PafintHons 

a. ‘.Breaeti* stiali nava tno some niBannu w tho Iwn •Bnwcti' n jociicn iS<i <302 ol Tdle 45 
of Fcdiral RegulaUons 

h 'Sresdi Nalifiealtttl »ui*’ ahall maan cna provisions of tno Noiilic««n m iho Case of 
Breach o1 Ui»ocwtod Protacted HeaJtti Infonnatson ai 45 CFR Pan 164. Subpan D arxl 
snendmentsttiereio 

C H..«.nflaii AmwciaM* nas, mo moanng given such term in seclicn 160 100 o1 Tillo 45 
Cibe o1 Federal Pegulaiort 

d -CiwetttD Enlit/ has the meaning gh'en auch larm In aeottcn 160.103 of Title -44. Code d 
Federal Regulatdns 

e nnaanalna Rflcard Set ' anat navo tho lairo meanng n Ihe term 'deaiflnaled re«rd 
sef' n 45 CFR Section 164 S01 

f rmi« AfMfPnaiiw ohall hove the same meaning as t*-« term -cala aggrogabon' in 45 
CFR SiKCian 104.501 

g ‘ Hnalih Cate O pefaibnn ’ shall have the aoma meantng as ihg lann 'hoatn can 
operabene* m 45 CFR Seciion 164 SOI 

h HITECH Ad* rresns the HeeHh WermaLonTecfnotooy lor Economic and Cinicol Haafln 
Act. Title XIII. Subrtilto O Pan 1 6 2 of Ihe Pireiican Recovery and Remvestmenl Act of 
3009 

1 'hTPAA* meena Ihe Heahh Ineurance POftabiMy and Acoountaimily Act o4 1996 Puttie 
LiwiW-191 »nd ihc Standards fer Privacy and Securfty of IndtadiiaCy IdanitnaDte Heaitn 
intermauon 45 CFR Parte i60 i62 ana I64 

1 'indivduar nfiB3 have Ihe aaniB meaning as the tenr ’indiviauai* m 46 CFR Sociion 
160103 Wid enaa ircudo a person who qualifies as a personal represemKrre n 
oceardance wflh 45 CFR SectBn 164 502(91 


1 Ct B 
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*•'8^ nwn Iho SUridards 1w Privacy of IrtdividjsCy ideolifidble HMBh 
tnfcrniBtbn at 45 CFR Parla 1M find 1M CfomuigaiBd under HIPAA by ihe Untlod aaies 
Departnient HeaBb arid Human Ser\-iae» 

• PrruBf.iBri HBartn cnfaimafenR* shall have lha Santa rraanliiQ as Ifta ^sfra ‘pcoiacied haallh 
irfotralion* in 45 CFR Seclioo 100 103. amhud s> ihs jifatrtwIiDo created or received try 
Busuvsa Assceale from or on behair Of Covered ErOlty. 

m ' flonuired fay Law * shat have Ihft «nte mean>rig as the wrm 'rstjuirod by W tn *5 CFR 
Section 154 103 

n ‘SejJfliJaji* atet iMaa ihe Secreisry of tiio Oeportmeni of Health and Human Seivicea or 
richer des^nee. 

0 *Saciirita_Bufe‘ shaS rr^an the Security Sianoafos tor ino Protecaoi* of Etceaonc 
Protected Health Irrfomiaiien oi 46 CFR Part IM. Sttipaii C. and amendhienia therelo, 

0 •imnariirad Pretoeted Health Infcrtnahon* st-af have the same inaaiilfO fliven auch leirr 
ii> sectior 154 402 Of TiOe 45. Coda Of Federal Reauiai) 0 >is 

a outer noiti viionfi, - All tenns not olheuMso dsHned heiein shall have Ihe meannff 
unter 45 C F R Paris 160.162 and 164 ea antmdod from lime to ii-ws, ano 
the HtreCH Asl 

| 2 ) LlflfljmlDtirhMii r'” *** ^°^^*^ H auillh InlormaHen. 

a Buaineaa Asaociats shsl non o*c doobse m»rri*n or iranapirt Protected Heetlh 
Informaion (PHi> axceol aa raaeonaoiy neeowary lo pnwao rho services outbied unrtei 
the AgrooTOft Further, the Business Asscoale. and its dreclors officers ompipyccs 
and agenK Shall ool use. dedOBa maintain v Iransm* PHI n any mannei Uiail would 
COr«thilo a vnHatien of the Privacy nnd Security Rub. 

b Busmoss Assoeale nay use or disclose PHI 

I For Ihe proper iranagomonl and aumimsirainn d Ihe BusLiess Asaocale. 

II As requred by law pufSLaM lo Ihe wnnB aei for,h irt paragraph p below, or 

III For dale aggrogaiiw purposes 'or Ihe health cere operatione of Covered 
ercty. 

c To Ihe exleni Busness Assoaese is pentimed under ihe Agreennertl fincAjdng irt» euhibn) 
to disclose PHI to a third party. Busmaaa Associate mwi obtain pnor la making any such 
disotosuro <i1 roasonabb asiuances from the Ihrd caity Ittel such PHI wll be hold 
cortTidenlialy and used or further diaclcdeo enly as rcqwreil by law w for Ihe purpose far 
when it wos disebsed to ihe third pany. and (III an agreemoot Iron suet* irsrd party lo 
n«l!y Business Asatxialb. in accotosnee wth 45 CFR 16o 410, of ar^ ^eac^ of the 
conTdenfiaEty d Ihe PHI lo Ihe siitent II has owanad knowiedos of such broach 

d Tne Buwnesa Assaoale shall nol discbse any PHI in rosponao to a roqued far 
diacloeura on the bows that n m roqurpd by law wiihout rust n«rtying Covered Enbty ao 
tbpl Covorod ErfHy has an opportuniy to Object to Ihe Asdosure ano lo setSe 
apocophate retet rt Covered 6 nt^y otvecH lo such dsebsure she Business Assaeieie 
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shall letlTBn lh>m Oisclwarg iha PHI uilil CM«r«d Emily hss smsustoa all remedies If 
Covered EnIHy does nalobiecl to such decfosiiTo wihip Iwe (5) business days ot 8bsin»ss 
Assodate'a noUflcdlKn. then Business •AssocIsJe rnsy chcose to dlsdow iltx ir/ofmabon 
or object as Business Asaedsie ompib apprapr?9l9 

e 11 Ihs Ceuotod HmHy notifies the Business Asscoale lhal Cowered Emily has agreed to be 
bound bv addtional raslnctions over attd abowe ihoae oees or oiadosiires or socuniy 
sofcguari^ of PHI purauam to Iho Prvacy end Soctiily Rule, ihe Busirwaa AsBoc<aie sh-aii 
be bound by such ^ctdnbnal resincuofts enH shal noi discisso PHI in vioimicn of such 
addhionsl reslOctions and Bhall Bbklo by any addhional reasonable seconly eatoguards 

fa) OWtoanona and AethrttMs of Busmesa AWOCiato. 


a Too Bw-nesa Associato Shell nolity IhB Covsnsd E-nbty's Privacy Olllcer vrtIhoLl 
uhreaaonabto delay end ui no case later than l^wo (3) business days fdtioMiiig the dale 
upon which Ihe BuBlneas Aaaoclete becomes awaro of any use cr disclosure rf pnolecwd 
heallh informalion nm prowWod for by the Agreemsi’t Of this Exhbil. oicJuding breaches ol 
unsecuied protected heflllh informaBon endtor any secuiUy incUent mat may hava an 
mpact on Iho prolectod hcollh mfowtaiion of Ihe Covorad Emny. 

b The QuslrieBS Associeito snal prompt^ perfonn a risk assess/nani wnor* it becomes aiaam 
of any c:f Ihe above shuabOPS The rttif wsoeement shaUinciLde but nOl be Iimlled to. lha 
toilowirig rifoimaiico. w ihe eicienl C is known by the Business Associaio 

» The nature ard exieni of me prcrociod heatih 'nrormarticn iiwotved inciudirg Ihe types 
of Identifiers arid Uie twelihood Ol ra*l<leht/icallon. 
w The unaulhoriiad person who used the prolocwd hcallh infoimaiien or io whom Ihe 
disctoauna WB& made. 

» Whether pio proiociDd healih inforrruillon was adbeiiy aegurod or utowod 
• The extent Ig witch the risk to Ihe oroteebsd healih inlcnn«ion has been »riligaled 

The Busir^ss Aswpale shall ccntplele ite rtsk aBaeasTram w-Woirt unroasonabte <telay 
and in no e«e later than two \Z> busmose deys cf dtsoowery of Ihe breach anc after 
comptabOf' imirwdialcly report the nndinge of Ihe r«k asswsmoni n wntir^ Io the 
Covered EniJly 

c The Busineaa AaeoBialia shel coropv wth gll applicable sectons ol lha Piwacy. Secwily, 
and Broach NotHicaban Rule 

d Businsss Auociaie shall mshe avaleble ail of ils uitornac inlicies and praceduies, hooka 
and records rtfolirg to toe use and disdosure of PHI racawad from or created or tacevec 
by the Businesa. Aaaoewto on bahalf of Covorad Emily to Ihe Seaelaiy for purposes of 
datermnlng CcMorcd Enlity's campEarJto wllh HIPAA and Ihe Privacy arxl Secunty Rule 

a Bupnos* Associate shall regaira all ef ha buairaaa sssootoes 1 M reofliwe. tee or have 
accasa to PHI under irw Agrooment to agree in writhg to adhere to toe aame rosincliorH 
arvj enndhicni on toe use and diacloeute ol PtH oortamod herein, including toe duly to 
return or dastroy too Phi as prawided under Seclion 3(l| herein The Covered Ertey shall 
be considered a drecl ihJrd patty baneficiery gf iho Cortraclors ^sineaa aaeociate 
agieerpents wrih Comractor'* intended humees asaoclBaa who wiB bo rijceiwing PKj 
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p(r$U9n| 1Q t(i>9 Agr^meni, Mtth ri^lrlB 0^ enriorcement and irdeoinitlcsbon from such 
bu&nesa aflaotisleft who aha^l be gaverned by the Agreement the purpoae af and 
dttcioBUO of proiecloo lioal^ infcrmBbon 


f Mflhm five (5) business Ays of recaipt ti a wrtson rcquasl ftam Covenid Er4Hy, Busness 
Asaoctsie Ehall make Gvall8tyi9 dutng normal business hours at ’ts olflcaa all records, 
baoks, agreemenls, pdicies and procedures reding to the use and dsdosure o^ PHI Ig 
me coivfed Enfliy, for purposes ol ensuing CovB<>ed EASty to dstermina Bustness 
Assadate's camptiance mHH Ihe terms of this Eshdil. 

g WKhin ten (IQ) business days of receivng a wrilisn requesS from Cowered Eridy, Business 
Auoagfo shall prgviA scooss io in a Oesignstod Record Sot to the Covered Entity, 
or as dirscied by Covered Erslty. to an irdividLiai in order to meet the requhemenia under 
45 CFR Scctior 184 524 

n Wdun ten (10) business dsys of >eceivtng a lonnsn leqvesi from Covered Enbty for an 
antendmerx of PHI or a record about an inoivxiusl comsinsd in a Desgnated Record Set, 
the Business Auccia^e shall make such PHI availsbia to Covered Ent4y for amondmsnl 
and incoiporaie any such amendment lo enabe Covered Enliiy to fdtllli ils obllgalions 
under 45 CFR SecUon 164 526. 

Busiieaa Associale sitall document eucti dactoaurea of PHI and information relased to 
euch disclosures as wcukf bo required for Covomd Ertiiy to rospond ig a request by an 
■niiivtduor tor an accounting ol disclosures c< PHI in accordatica i^tlh 45 CFR Section 
164 528 

Wlhn ten (10) bisness Ays of receiwng a wrflen request Ihim Cowered Entity for a 
request lor an eooountng ol disclosures of PHI. Busmsss Assoaaie shall make avaiisbo 
to Cowered Emily such Intcrmation as Cowered may require to Mfiii tis oWigaiicns 
to provide an ftccoonttng cf disclosuras with raspect to PHI m acoortrance wvilb 45 CFR 
SeoCor 164 526 

h miheevenl any individual requests access lo, amendment of or socounLng of PHI drectly 

from Ihq Btisiness Aesocialo the Busmoss Associete shall wahn imd (2) busness days 
forward Such request lo Covered ErtUy Covered EnIHy shaD have the respansbiity ef 
respondng lo forwarded requests Hmwever if fcvwajding Iho rndviAals requosi to 
Covered Emily would cause Covetod EnWy or the Business Associale to wtoiste HIPAA 
and ihe Piivecy and SecurHy Rtie, Ihe Business Assoc^e shall inslesd respond to the 
indiyiduars raquosl as rgquired Sy suA law and nrtify Cewored inlity ol swe* nrepooso 
as soon as practicable. 

I. WtIHn teiw (ID) txjBinosa days of toimnabon of the Aoroement. tor any mason the 
business Aoaocitue shall return or destroy, as specllied by Covered Emily, al PHI 
rocervsd frem, or crested or receded by Ihe Busiiwess Assocists m conrocboi* wuh (he 
Agreainent. and shdil nol relain any copes or bacK-i^i lapee ol such PHJ. If lelurn o< 
dsstmstion « not feasible, or the dt^oston of ihe PW has boon oiherMnse agreed to in 
Ihe Agrwme.nL Business Assodaleshaloontinue to extend (he proleeliena ef this Exhibil, 
lo such PHI end Imit further uses and discKisures of such PHi to those purposes that 
make the retorn or de*lfueCian infeasible, foi so long as Busiwaa Associate mainlans 
SLich PHI If Covered Errtrty. m H» sole drsctolion. requires Ihsc the Business Aesociste 
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dostioy any or ai PHI. Ihc Busnou Aaaocine efrail eeriiry to Covenod bnniyiiui th« pk) 
hftA been dcsb^Mjd 

|0) CUmiMtlQiia Ql CBmmd Ejrtllv 

a Cozened Enlily alnl' raiify aushwB Aewctadeor any changas or linvtsboiXa} in ila Malice 
of Ptivacy Practoos provdatf lo Htfividuals in aooordanoe wfilt 45 CFR Soclion 154 920 
to Iho OKlant that suoh change or Imilellon may a'feci Bjsinow Aasooale'a use or 
diackisutearPHI 

b Covered Entity Ehall prompdy noHy Businesa As»acia4a of any changea in, or revocation 
ol parqMWdn prenM to Coven^ Enbty l>y miTividjedi w^ooe PHI may be uaed or 
dadosed oy Buomoss Aaeeoale under ths Agreomont. pursuant lo 45 CFR Section 
164 509 or 45 CPR Seotion 164 509 

c Co«c5eif ontty stal promptly notify Busnow Associale of any reslricijans on the use or 
dlsdoaine of PHt that Covered Enlllv has agreed to m aocordgnca aflh 45 CPR 164 522. 
to the orionr that such mtfotion may affect Business Assooale's use or disctosure ol 
PHI 

(S) TM-mlnattoa ter Camg 

the Covered Emily nwy tmmediale^ terminate the Agreement upon Covensd Ertfly'e 
knoivledge of a h^ch by Business Assocarie of the Business Assooale Agiennient 
sst loth herein as Exhibit C The Cenored Entity nuy after in’mcdaloly lenminate the 
Agreement gr proyide an opporluntty for Business Assoeate 10 cure the alcgoct 
Oreacti vkilhin a tirtiafmme speciTied tiy Covered Efltily If Covemd Entity detBiminss 
that neither loimnsCon nor cure 4 teasbie Covered Entily shall report the vtoblion to 
the Secretary. 

IS) MlMQllaiwQua 

a Dohnilions and R oq iifalerv Referencos All terms used, bat not otherwise clefned herein, 
shall have the same meanrig as thoea larme m the Pnvacy and Securiiy Ri/e. ard iho 
HITECH Act. as cottffed al 45 CFR Paits t60 and 154 and as amended bom time io tvne 
A reference m the Agreement as amended to Include this Exhibit, to a Section in the 
Privacy and Socurty Rule means the Section as in offbcl or bs amended. 

h Am endment Covo/od Ent-ty and Busir«ss Aasociato agree io take such aelion as a 
nscesBSfY to amend the Agreemont. ncibding (ha ExhiHl from time to tme as e 
necessary for Covered Ent ty 10 comely with the changos ir die reeuirsmenls of HIPAA 
the Privacy and security Rue, and appticabis feoarsi and stale law 

t Data Ownership . The Business Axsocials acKrowlacigas that 3 has no nwiorship rtglits 
wch respect to iho PHI provided by or created an behalf ot Covered Entty urder ih; 
Agreement 

d irtarerataeorv The peities agree that any ambQuily m the Agreameni tx- tnia Exiubt ahsli 
be resolved to pomiit Covered Emny lo comply with HIPAA. the Privacy and Seourty Ruts 
and ihe H3TECM Act 
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